Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3In Modem, there is a possible system crash due to an uncaught exception.Check if you run itEPSS 0.53%Dec 2, 2025
- Medium5.3In Modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.39%Dec 2, 2025
- High8.4IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.Check if you run itEPSS 0.12%Dec 2, 2025
- Medium6.4The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting vCheck if you run itEPSS 0.20%Dec 2, 2025
- High8.8The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles() function in all versioCheck if you run itEPSS 0.59%Dec 2, 2025
- Medium5.4HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-526Check if you run itEPSS 0.27%Dec 2, 2025
- Medium4.5Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information.Check if you run itEPSS 0.46%Dec 2, 2025
- Medium4.0Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.Check if you run itEPSS 0.16%Dec 2, 2025
- Medium4.0Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.Check if you run itEPSS 0.20%Dec 2, 2025
- Medium5.5Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.Check if you run itEPSS 0.13%Dec 2, 2025
- Medium4.0Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to access partial data in sandbox.Check if you run itEPSS 0.13%Dec 2, 2025
- Medium5.9Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy StoreCheck if you run itEPSS 0.11%Dec 2, 2025
- High7.3Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.Check if you run itEPSS 0.12%Dec 2, 2025
- High7.3Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.Check if you run itEPSS 0.12%Dec 2, 2025
- Medium4.3Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.Check if you run itEPSS 0.28%Dec 2, 2025
- Medium4.3Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.Check if you run itEPSS 0.29%Dec 2, 2025
- Medium4.3Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.Check if you run itEPSS 0.28%Dec 2, 2025
- Medium4.3Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.Check if you run itEPSS 0.28%Dec 2, 2025
- Medium4.2Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory.Check if you run itEPSS 0.16%Dec 2, 2025
- Medium5.6Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.Check if you run itEPSS 0.13%Dec 2, 2025
- Medium6.2Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege.Check if you run itEPSS 0.11%Dec 2, 2025
- Medium5.7Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.Check if you run itEPSS 0.11%Dec 2, 2025
- Critical9.8SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.Check if you run itEPSS 0.46%Dec 2, 2025
- Medium6.1Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /classes/Login.php.Check if you run itEPSS 0.25%Dec 2, 2025
- High7.5Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerable to SQL injection via the 'title' parameter in com.wanli.lvzhoucms.service.ContentServicCheck if you run itEPSS 0.32%Dec 2, 2025
Sort